$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer File: E4AC5A0B7B031CC8F4387521F896C49FC8165D46.cer (raw, json) Hash identifier: WVeYCQOe3qEqgtQoq3lqxP1Imr4tOFaFJOu3QL5tPJk= Subject key identifier: E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 284524A9A31C0143CC6AFDAC55DCB543B6EAB8C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft caRepository: rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:23:55 +0000 Certificate not after: Sun 02 May 2027 02:28:55 +0000 Subordinate resources: IP: 103.139.188.0/23 IP: 2001:df0:8d80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:45:24:a9:a3:1c:01:43:cc:6a:fd:ac:55:dc:b5:43:b6:ea:b8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:23:55 2026 GMT Not After : May 2 02:28:55 2027 GMT Subject: CN=E4AC5A0B7B031CC8F4387521F896C49FC8165D46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:56:1a:9f:9a:3e:f7:f8:4e:bd:7c:08:5b:3d: 9d:3a:95:9d:0d:44:ab:32:69:2d:ad:ec:30:56:ce: 62:cd:40:25:53:53:12:70:61:00:20:47:56:8c:1c: ce:36:18:41:04:03:50:0d:e6:eb:8a:a4:18:c0:e5: db:b9:5a:25:a2:e1:17:38:e9:35:4f:15:28:8c:82: 9a:5b:f9:4e:ef:32:87:9a:76:08:66:cb:42:e9:f8: c7:dc:c7:33:d7:0d:ad:1c:77:76:bb:a0:93:6d:7f: 4d:4e:09:c9:5b:81:49:d6:84:c4:73:a2:13:18:a9: 08:60:44:6f:a0:74:53:1b:5f:26:76:51:eb:a7:6c: 4f:ed:f7:cc:17:1a:06:28:37:00:4c:7d:08:cb:66: a0:34:79:b7:ca:d0:4b:0e:42:2e:99:ab:d6:fb:d3: 96:b9:98:52:d1:15:72:de:da:0f:4c:7b:4b:28:6c: 8b:b5:d3:a7:2b:2c:a5:33:bd:c4:ca:4c:65:e8:16: 4d:35:0c:55:3e:ad:78:03:fe:1a:ec:db:56:3d:e6: 95:39:c2:76:b5:74:95:58:97:d7:7d:5a:b7:4b:e6: e2:4e:6b:16:e1:c0:54:f1:95:e8:03:5e:49:86:18: 59:b3:25:d6:dc:ca:fa:bb:ad:e8:85:6b:12:3e:5a: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:AC:5A:0B:7B:03:1C:C8:F4:38:75:21:F8:96:C4:9F:C8:16:5D:46 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/E4AC5A0B7B031CC8F4387521F896C49FC8165D46.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.188.0/23 IPv6: 2001:df0:8d80::/48 Signature Algorithm: sha256WithRSAEncryption 07:26:7d:58:52:64:ab:a1:76:c7:47:9c:a5:00:78:7b:78:26: 6f:45:4a:db:3e:5c:a8:af:5a:21:b5:ad:83:e1:0f:a5:71:dd: 06:01:bf:8f:19:b3:53:15:16:f1:c6:f2:87:8e:52:f8:bf:0c: ea:df:37:fc:37:ff:b5:e9:e6:9e:6b:75:69:03:16:b2:7e:dd: 65:fe:44:90:ab:85:1f:71:4f:79:34:68:76:63:30:29:30:55: d4:69:2d:27:d2:91:e1:4f:d1:7b:6e:ba:27:11:e6:1d:bf:ba: 00:a6:c8:f9:29:22:06:53:5f:74:02:b8:79:7f:52:0d:27:9f: 93:3c:f5:97:09:c3:e6:b5:9f:f1:78:70:28:c7:90:5a:a3:6b: bc:78:2d:b5:63:1d:74:7e:2d:5b:57:09:a5:d2:6f:6c:59:83: b1:d7:42:ce:53:8e:eb:76:f6:ad:62:be:18:b6:30:7e:41:62: e2:20:36:4f:08:54:74:b8:a5:9e:ca:ba:bd:c5:79:9a:89:87: 29:10:c5:46:d1:fb:bd:2e:8c:2a:d4:19:ea:7f:08:85:80:22: 57:79:37:75:40:34:ea:42:0f:25:9a:b3:c8:5a:cd:05:e9:85: f0:99:9c:0a:9d:68:a5:48:9e:93:82:8d:8a:e5:d0:44:39:74: 8e:a5:d2:72 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUKEUkqaMcAUPMav2sVdy1Q7bquMYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMjM1NVoX DTI3MDUwMjAyMjg1NVowMzExMC8GA1UEAxMoRTRBQzVBMEI3QjAzMUNDOEY0Mzg3 NTIxRjg5NkM0OUZDODE2NUQ0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVWGp+aPvf4Tr18CFs9nTqVnQ1EqzJpLa3sMFbOYs1AJVNTEnBhACBHVowc zjYYQQQDUA3m64qkGMDl27laJaLhFzjpNU8VKIyCmlv5Tu8yh5p2CGbLQun4x9zH M9cNrRx3drugk21/TU4JyVuBSdaExHOiExipCGBEb6B0UxtfJnZR66dsT+33zBca Big3AEx9CMtmoDR5t8rQSw5CLpmr1vvTlrmYUtEVct7aD0x7Syhsi7XTpysspTO9 xMpMZegWTTUMVT6teAP+GuzbVj3mlTnCdrV0lViX131at0vm4k5rFuHAVPGV6ANe SYYYWbMl1tzK+rut6IVrEj5aW8MCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOSsWgt7AxzI9Dh1IfiWxJ/IFl1GMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2ViNzk5MDY4LTRlYzgtNGMzNi04ZmE3LTNlNzJhZWJjZWViOC8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9lYjc5OTA2 OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC9FNEFDNUEwQjdCMDMxQ0M4 RjQzODc1MjFGODk2QzQ5RkM4MTY1RDQ2Lm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ4u8MA8EAgACMAkDBwAgAQ3wjYAwDQYJKoZIhvcNAQELBQADggEBAAcmfVhS ZKuhdsdHnKUAeHt4Jm9FSts+XKivWiG1rYPhD6Vx3QYBv48Zs1MVFvHG8oeOUvi/ DOrfN/w3/7Xp5p5rdWkDFrJ+3WX+RJCrhR9xT3k0aHZjMCkwVdRpLSfSkeFP0Xtu uicR5h2/ugCmyPkpIgZTX3QCuHl/Ug0nn5M89ZcJw+a1n/F4cCjHkFqja7x4LbVj HXR+LVtXCaXSb2xZg7HXQs5Tjut29q1ivhi2MH5BYuIgNk8IVHS4pZ7Kur3FeZqJ hykQxUbR+70ujCrUGep/CIWAIld5N3VANOpCDyWas8hazQXphfCZnAqdaKVInpOC jYrl0EQ5dI6l0nI= -----END CERTIFICATE-----Generated at Tue May 12 22:46:09 2026 by rpki-client